<?php
require_once '../../config.php';
$forbidden_words = array("赌博", "百家乐", "彩金", "赌场", "女优", "微信", "屎", "尿", "台独"); // 设置违禁词数组

if (isset($_POST['submit'])) { // 检查是否有 POST 请求

    // 获取表单数据并转义特殊字符
    $wenzhang_name = $_POST["wenzhang_name"];
    $wenzhang_neirong = $_POST["wenzhang_neirong"];
    $wenzhang_miaoshu = $_POST["wenzhang_miaoshu"];

    // 检查违禁词和长度限制
    foreach ($forbidden_words as $word) {
        if (strpos($wenzhang_name, $word) !== false || strpos($wenzhang_neirong, $word) !== false || strpos($wenzhang_miaoshu, $word) !== false) {
            echo "含有违禁词,请检测后发布。";
            exit;
        }
    }
    
    if (mb_strlen($wenzhang_name) > 50) {
        echo "文章标题不能超过50个字。";
        exit;
    }
    
    if (mb_strlen($wenzhang_neirong) > 8000) {
        echo "文章内容不能超过8000个字。";
        exit;
    }
    
    if (mb_strlen($wenzhang_miaoshu) > 100) {
        echo "文章描述不能超过100个字。";
        exit;
    }

    if (isset($_COOKIE['user_id']) && isset($_COOKIE['user_password'])) {
        $user_id = $_COOKIE['user_id'];
        $password = $_COOKIE['user_password'];

        // 查询数据库中是否存在该用户
        $sql = "SELECT * FROM user WHERE user_id = '".$user_id."' AND user_password = '".$password."'";
        $result = mysqli_query($con, $sql);
        $user_info = mysqli_fetch_assoc($result);
        $user_login_id = $user_info['user_login_id'];
        if(mysqli_num_rows($result) > 0) {

            // 获取注册 IP 地址
            $reg_ip = $_SERVER['HTTP_X_FORWARDED_FOR'] ?? $_SERVER['REMOTE_ADDR'];

            // 使用 IP 地址解析 API 获取注册地理位置信息
            $reg_addr = "未知地点";
            $url = "http://ip-api.com/json/" . $reg_ip;
            $data = json_decode(file_get_contents($url), true);
            if($data && $data['status'] == 'success') {
                $reg_addr = $data['query'];
            }

            //获取表单数据
            $wenzhang_view = 0;
            $wenzhang_dianzan = 0;
            $wenzhang_time = date("Y-m-d H:i:s"); //设置文章发布时间
            $wenzhang_new = $wenzhang_time; //设置文章更新时间为发布时间
            $wenzhang_ip = $reg_addr; //获取文章发布地点
            $wenzhang_shenhe = "待审核"; //设置文章审查状态为待审核

            //查询当前最大ID
            $result = mysqli_query($con, "SELECT MAX(wenzhang_id) FROM wenzhang");
            $row = mysqli_fetch_array($result);
            $max_id = $row[0];

            //设置插入数据的ID
            if ($max_id == null) {
                $wenzhang_id = 1;
            } else {
                $wenzhang_id = $max_id + 1;
            }


            //插入数据到数据库
            if (!empty($wenzhang_neirong)) {
                $sql = "INSERT INTO wenzhang (wenzhang_id, user_login_id, wenzhang_name, wenzhang_neirong, wenzhang_miaoshu, wenzhang_time, wenzhang_new, wenzhang_view, wenzhang_dianzan, wenzhang_ip, wenzhang_shenhe)
                VALUES ('$wenzhang_id', '$user_login_id', '$wenzhang_name', '$wenzhang_neirong', '$wenzhang_miaoshu', '$wenzhang_time', '$wenzhang_new', '$wenzhang_view', '$wenzhang_dianzan', '$wenzhang_ip', '$wenzhang_shenhe')";
                if (mysqli_query($con, $sql)) {
                    // 要跳转到的页面URL
                    $redirectUrl = "https://mcslm.com";
                    // 使用header()函数将浏览器重定向到指定URL
                    header("Location: $redirectUrl");
                    exit;
                } else {
                    echo "发布失败,请重试。";
                }
            } else {
            }
            mysqli_close($con);

        } else {
            // 验证失败,提示用户重新输入
            echo "请联系admin@zunjian.top来解决问题</a>";
        }
    } else {
        // 验证失败,提示用户重新输入
        echo "请先登录,<a href='https://mcslm.com/login.php'>去登录</a>";
    }
}
?>
<!DOCTYPE html>
<html>
<head>
    <title>发布文章</title>
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <style>
    body {
        font-family: Arial, sans-serif;
        background-color: #f2f2f2;
        margin: 0;
        padding: 0;
    }
<pre><code>h1 {
    color: #333333;
    text-align: center;
    padding: 20px;
    background-color: #ffffff;
    margin: 0;
}

form {
    max-width: 600px;
    margin: 20px auto;
    background-color: #ffffff;
    padding: 20px;
    box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);
}

label {
    display: block;
    margin-bottom: 10px;
    font-weight: bold;
}

input[type=&quot;text&quot;],
textarea {
    width: 100%;
    padding: 10px;
    font-size: 16px;
    border: 1px solid #cccccc;
    border-radius: 4px;
}

input[type=&quot;submit&quot;] {
    background-color: #333333;
    color: #ffffff;
    padding: 10px 20px;
    font-size: 16px;
    border: none;
    border-radius: 4px;
    cursor: pointer;
}

input[type=&quot;submit&quot;]:hover {
    background-color: #555555;
}

.a {
    background-color: #333333;
    color: #ffffff;
    padding: 10px 10px;
    font-size: 16px;
    border: none;
    border-radius: 4px;
    cursor: pointer;
}

.a:hover {
    background-color: #555555;
}
&lt;/style&gt;
&lt;script src=&quot;https://mcslm.com/js/ckeditor/ckeditor.js&quot;&gt;&lt;/script&gt;
</code></pre>
</head>
<body>
    <h1>发布文章</h1>
    <form method="post" action="">
        <label for="wenzhang_name">文章标题(50字):</label>
        <input type="text" id="wenzhang_name" name="wenzhang_name" required maxlength="50" placeholder="标题"><br><br>
        <label for="wenzhang_neirong">文章内容(8000字):</label>
        <textarea id="wenzhang_neirong" name="wenzhang_neirong" maxlength="8000"></textarea><br><br>
        <label for="wenzhang_miaoshu" placeholder="描述">文章描述(100字):</label>
        <input type="text" id="wenzhang_miaoshu" name="wenzhang_miaoshu" required maxlength="100"><br><br><input type="submit" name="submit" value="发布(最少1秒审核成功)">&nbsp;&nbsp;<a href="https://www.picgo.net/" class="a" target="_blank">图床</a>
    </form>
<script>
    CKEDITOR.replace('wenzhang_neirong');
</script>
</body>
</html
修改错误phprequire_once configphp;$forbidden_words = array赌博 百家乐 彩金 赌场 女优 微信 屎 尿 台独; 设置违禁词数组if isset$_POSTsubmit 检查是否有 POST 请求 获取表单数据并转义特殊字符 $wenzhang_name = $_GETwenzhang_name; $wenzhang_nei

原文地址: https://www.cveoy.top/t/topic/h5GK 著作权归作者所有。请勿转载和采集!

免费AI点我,无需注册和登录